Cybersecurity
The baseline (MFA, accounts, core policies) lives in Microsoft 365. Cybersecurity goes further: detection, awareness training, tested backups, and structured incident response, aligned with Law 25 when personal information is involved.
What's included
- Multi-factor authentication on critical accounts
- Sensible password policies for an SMB
- Email protection: anti-phishing and reporting
- 3-2-1 backup strategy and restore testing
- Administrator and shared account review
- Prioritized vulnerability review (endpoints and Microsoft 365)
- Baseline conditional access policies (Entra)
- Employee awareness: BEC, suspicious links, passwords
- Documented incident response procedure
- Law 25 alignment when personal information is involved